Confidentiality is the foundation of our work
Engaging TradeRisk means sharing sensitive information: about customers, business partners, ownership structures, transactions and sometimes individuals. We take that trust extremely seriously.
We comply strictly with the General Data Protection Regulation (GDPR), work under a confidentiality agreement for every client and protect all information carefully — from the first introduction through to closing a file.
Ask about our confidentiality arrangementsLast updated: 18 October 2026
Our principles
Strict GDPR compliance
We only process personal data on a valid legal basis, for a clear purpose and for no longer than necessary.
Confidentiality for every client
We are bound by a confidentiality agreement for every client. What you share with us stays between you and us.
Data minimisation
We only request and retain the information that the assignment genuinely requires — nothing more.
Careful security
Files are stored securely and are only accessible to the people working on your assignment.
No resale or reuse
Client information is never sold, shared for marketing purposes or used for other assignments.
Transparent and accountable
We explain what we do with data and answer privacy questions quickly and concretely.
Confidentiality: for every client, without exception
Compliance questions often involve commercially sensitive information: new markets, customer relationships, pricing agreements, product specifications or internal shortcomings. That is precisely the information needed to make a sound assessment.
That is why TradeRisk is bound by a confidentiality agreement for every client. This confidentiality applies to everyone involved in your assignment and remains in force after the assignment has been completed.
Does your organisation have its own non-disclosure agreement (NDA)? We are happy to sign it before you share any information with us.
- Confidentiality agreement for every client
- Applies to everyone involved
- Remains in force after the assignment ends
- Happy to sign your own NDA in advance
How we protect client information
Due care is not found in a policy document, but in day-to-day practice. This is how we handle the information you entrust to us:
Need-to-know access
Only the people working on your assignment have access to your file.
Separated files
Information from different clients is strictly separated and never exchanged between assignments.
Secure storage and exchange
Files are stored in secure environments. We prefer to exchange sensitive documents via a secure connection rather than loose email attachments.
Only what is needed
We ask specifically for the information the assignment requires and do not process data that is not relevant to it.
Deletion afterwards
After an assignment has been completed, we keep information no longer than necessary or legally required, and then delete or destroy it securely.
Awareness within the team
Our team consists of compliance and risk professionals for whom confidentiality and due care are daily practice.
Personal data in due diligence and screening
Due diligence and sanctions screening sometimes mean that we research data about individuals, such as directors, ultimate beneficial owners (UBOs) or politically exposed persons (PEPs). We only do so when this is necessary for the assignment and on a valid legal basis — for example a legal obligation or our client's legitimate interest in managing integrity and sanctions risks.
Wherever possible we use public and reliable sources, limit the research to what is relevant to the risk, and record in our report only what is needed to reach a well-founded assessment.
Depending on the assignment, we act either as a processor on your behalf or as an independent controller. Where we act as a processor, we conclude a data processing agreement with you that sets out the arrangements on security, confidentiality and retention periods.
Privacy on this website
On our own website, too, we are careful with data:
Contact form
Information you enter in the contact form (name, organisation, email address, phone number and your message) is used solely to handle your request. The form is sent to us by email via an email service (Resend).
Visitor statistics without cookies
We keep anonymised track of how our website is used: which pages are viewed, what is clicked on and which website a visitor came from. We do not use cookies for this, do not store IP addresses and cannot personally identify visitors. An approximate location (city and country) is derived by our hosting provider and not stored in a traceable way. What you type into forms is never recorded.
Hosting
Our website is hosted by Vercel. With every visit, technically necessary data is processed in order to display the page and secure the website.
No advertising or third-party tracking
We do not use advertising networks, social media pixels or any other third-party tracking.
Retention periods
We do not keep personal data for longer than is necessary for the purpose for which it was collected. Contact requests that do not lead to an assignment are deleted once the question has been dealt with and no further contact is needed.
We keep assignment files for as long as necessary to carry out the assignment, to account for our work and to meet legal obligations. Our financial records are subject to the statutory Dutch tax retention period of seven years. Specific retention arrangements can be agreed per assignment.
Your rights under the GDPR
Under the GDPR you have a number of rights regarding your personal data. You can ask us for:
- access to the data we process about you
- rectification of incorrect or incomplete data
- erasure of your data
- restriction of processing
- transfer of your data (data portability)
- to object to the processing of your data
We respond to your request within the statutory period of one month. If you are not satisfied with how we handle your data, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). We would appreciate it if you contacted us first, so that we can look for a solution together.
If something does go wrong
Despite all due care, a security incident can never be ruled out entirely. Should a data breach occur, we act in accordance with the GDPR: we limit the consequences immediately, report the breach to the Dutch Data Protection Authority within 72 hours where required, and inform the clients concerned without undue delay.
Frequently asked questions about privacy and confidentiality
Does TradeRisk sign a non-disclosure agreement (NDA)?
Yes. TradeRisk is bound by a confidentiality agreement for every client. If your organisation has its own NDA, we are happy to sign it before you share confidential information.
Does TradeRisk conclude a data processing agreement?
Yes. When we process personal data on your behalf as part of an assignment, we conclude a data processing agreement covering security, confidentiality and retention periods.
Who has access to the information I share?
Only the people working on your assignment. Information is not shared with other clients and not used for other assignments.
Are you allowed to research the personal data of our customers or UBOs?
Yes, provided this is necessary for the assignment and there is a valid legal basis, such as a legal obligation or the legitimate interest in managing integrity and sanctions risks. We limit the research to what is relevant to the risk.
How long do you keep our data?
No longer than necessary for the assignment and to meet legal obligations. If desired, we agree specific retention periods per assignment.
How can I share information with you securely?
Contact us before sending sensitive documents. We will then agree on the most secure way to exchange the information.
Does this website use cookies?
No. We only keep anonymised visitor statistics, without cookies and without storing IP addresses.
Questions about privacy or confidentiality?
Would you like to agree on a non-disclosure or data processing agreement in advance, or do you have a question or request about your personal data? Contact us at info@traderisk.nl.
Get in touch